Alert! Phishing that required a little examination.

[LAS14]

I received the e-mail below. We are frequent shoppers at Home Depot and do have a Paypal account. I was pretty suspicious but did take the trouble to log in directly.

From: Customer Service
Sent: Tuesday, May 11, 2021 11:15 AM
Subject: Attn: Your PayPal Order of $746.89 to Home Depot LLC - In Process

PayPal
Date: 2021-05-11 04:45:58 EST

Subscription ID: PP-STHE0783G

Dear User,

Your authorization for the payment $746.89 to Home Depot is successful.


This charge of$746.89 (inclusive of taxes) will appear on your bank or card statement as payments to **Home Depot. To view all the transaction details, please log into your PayPal account, it may take 24 to 48 hours for this transaction to appear on your account.

[demtenjeep]

1. pshing

.

[MerryHolidays]

2. Phishing n/t

[demtenjeep]

4. thank you

I thought it looked funny

[MerryHolidays]

6. It sucks no matter how you spell it!

I'm just being pedantic. The bigger issue is how disgusting it is that fraud is so rampant.

[LAS14]

5. Yeah, I knew that. Thanks! This a.m. I wrote "north shore" as "north sure..." Sigh... nt

[lisa58]

3. I got one of those - checked the bank account connected to PayPal and no such transaction

[RegularJam]

7. I've received three almost identical ones...

PayPal, Amazon, and Apple.

[struggle4progress]

8. I got six concerned phone calls from "Amazon" within thirty minutes

last week -- about $700+ "suspicious activity" on my account

[Midnightwalk]

9. Like you say go directly to the site

Never follow the link in the email. That will often point to a spoofed site that might look like the real thing but isn’t where your password will be captured

[Arkansas Granny]

13. This! Never click through using the links in the email. Open a new window

and go directly to PayPal site.

[Initech]

10. If it looks like a scam, it probably is one!

[moonscape]

11. And even sometimes when it doesn't. n/t

[Wounded Bear]

12. I get shit like that all the time...

one of the most common is to "confirm your cancellation" to shit I've never belonged to or even heard of.

Thankfully, most of it goes straight to spam and I delete without opening.

Pays to be vigilant.

[muriel_volestrangler]

14. And sometimes it's just a company getting their employees' hopes up in a phishing test

Train firm’s ‘worker bonus’ email is actually cybersecurity test

A rail union has hit out at a “cynical and shocking stunt” after a train company emailed staff to promise a bonus to workers who had run trains during the pandemic – only to reveal it was in fact a test of their cybersecurity awareness.

West Midlands Trains emailed about 2,500 employees with a message saying its managing director, Julian Edwards, wanted to thank them for their hard work over the past year under Covid-19. The email said they would get a one-off payment as a thank you after “huge strain was placed upon a large number of our workforce”.

However, those who clicked through on the link to read Edwards’ thank you were instead emailed back with a message telling them it was a company-designed “phishing simulation test” and there was to be no bonus. It warned: “This was a test designed by our IT team to entice you to click the link and used both the promise of thanks and financial reward.”

The leader of the Transport Salaried Staffs’ Association (TSSA) union said it was “crass and reprehensible”, especially given that one worker at West Midlands Trains had died from Covid-19 and many others had fallen ill with the virus.

https://www.theguardian.com/uk-news/2021/may/10/train-firms-worker-bonus-email-is-actually-cyber-security-test

Tossers.

[Phoenix61]

15. That's a bs test.

If the worker clicked on the email address it would have shown an actual e-mail address for the company. Obviously not a phishing scam. If you get an e-mail from your bank, say Wells-Fargo, and click on it and it’s a scam you get random stuff “[e-mail]” which would obviously not be a wells-Fargo e-mail address.

[Stallion]

18. Right-the Email Sender Address is always the dead giveaway of a scam

[Midnightwalk]

16. Yeah that crosses the line

We’ve gotten ones saying you are due a new laptop and some security alert ones to either entice you or scare you to click the link.

From colleagues who got caught you have to take the training again. The first few times caught some people. I don’t hear anyone getting caught any more. My manager got caught by one.

This one crosses the line. They shouldn’t have touched the virus and even a bonus seems too far.

[marie999]

17. When I get an email supposedly from my bank or credit card giving me a number to call,

I never call that number. I always call the number that I know is the correct one. I also check our bank accounts and credit cards every day. When I get a call from "Social Security" I always tell them I need their name address and phone number so I can turn it over to the FBI. For some reason, they always hang up on me.

[brooklynite]

19. Whenever you see "Dear User" or "Dear [email name]", ignore it.